Lucene search
+L

4 matches found

CVE
CVE
added 2024/04/09 10:25 a.m.95 views

CVE-2024-31863

CVE-2024-31863 affects Apache Zeppelin. The vulnerability allows authentication bypass by spoofing through replacing existing notes/annotations, effectively bypassing permissions. Affected: Zeppelin 0.10.1 before 0.11.0. Impact: potential unauthorized access via note/annotation replacement. Mitig...

5.3CVSS5.2AI score0.01008EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/04/09 10:25 a.m.21 views

CVE-2024-31863 Apache Zeppelin: Replacing other users notebook, bypassing any permissions

Authentication Bypass by Spoofing vulnerability by replacing to exsiting notes in Apache Zeppelin.This issue affects Apache Zeppelin: from 0.10.1 before 0.11.0. Users are recommended to upgrade to version 0.11.0, which fixes the issue...

5.2AI score0.01008EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/04/09 10:25 a.m.21 views

CVE-2024-31863 Apache Zeppelin: Replacing other users notebook, bypassing any permissions

Authentication Bypass by Spoofing vulnerability by replacing to exsiting notes in Apache Zeppelin.This issue affects Apache Zeppelin: from 0.10.1 before 0.11.0. Users are recommended to upgrade to version 0.11.0, which fixes the issue...

6.8AI score0.01008EPSS
Exploits0References2
OSV
OSV
added 2024/04/09 10:25 a.m.8 views

CVE-2024-31863 Apache Zeppelin: Replacing other users notebook, bypassing any permissions

Authentication Bypass by Spoofing vulnerability by replacing to exsiting notes in Apache Zeppelin.This issue affects Apache Zeppelin: from 0.10.1 before 0.11.0. Users are recommended to upgrade to version 0.11.0, which fixes the issue...

5.3CVSS6.1AI score0.01008EPSS
Exploits0References5
Rows per page
Query Builder